Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
File: 38322e3131382e32382e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: CdtOTgxP4OrfIEkbxRgbahqDTs6nqrut0ZuHjgn3oL8=
Subject key identifier: 78:35:9F:B3:E7:18:34:B0:9A:32:DB:DE:3F:F3:2F:B9:C8:43:12:F8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0B4256615038E240873DBF6D3AD5A27E43FD5566
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
Signing time: Sun 19 Apr 2026 17:47:05 +0000
ROA not before: Sun 19 Apr 2026 17:42:05 +0000
ROA not after: Sun 18 Apr 2027 17:47:05 +0000
asID: 63473
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:42:56:61:50:38:e2:40:87:3d:bf:6d:3a:d5:a2:7e:43:fd:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Apr 19 17:42:05 2026 GMT
Not After : Apr 18 17:47:05 2027 GMT
Subject: CN=78359FB3E71834B09A32DBDE3FF32FB9C84312F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:ad:9c:cb:39:ae:a1:10:59:00:c9:2f:5c:
7d:58:43:8f:58:ed:31:ff:8c:38:83:bf:1c:c4:67:
a7:6d:ca:3b:90:02:32:fe:7e:83:ad:d2:aa:dd:94:
15:5d:55:9b:9e:c2:47:56:d2:53:7f:5a:96:17:be:
32:0a:9a:2c:47:31:dc:9c:69:53:76:e6:b1:ed:56:
69:06:f8:72:e8:30:d8:d9:76:52:d9:ca:cb:83:b0:
66:bc:4c:31:73:09:02:88:66:e9:27:dd:0c:da:2c:
c7:62:f1:ab:7b:2b:5a:40:40:12:1d:c2:5f:f3:46:
b3:f7:94:24:26:68:a3:7c:70:69:5e:96:77:48:ee:
bd:f9:7a:97:63:fe:64:4d:ba:4d:74:7c:f0:72:2a:
ba:a2:f9:83:87:e8:81:2f:92:06:a6:79:23:7a:c1:
94:06:34:4e:73:95:a1:b0:8b:f3:c4:83:d9:b7:d9:
f8:3f:d7:a8:41:8d:36:23:bb:a9:85:58:d7:62:33:
71:3e:b1:d4:6c:ad:fd:7b:d6:3a:ab:af:b3:4e:fa:
4a:98:31:13:92:70:9e:3e:b3:4c:5d:82:0f:b7:c5:
af:62:84:a6:0e:0c:c3:3e:cd:d2:66:e0:b2:8c:7a:
3c:3c:2b:3c:d4:ec:09:6a:e4:94:1e:d0:d5:0f:c9:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:9F:B3:E7:18:34:B0:9A:32:DB:DE:3F:F3:2F:B9:C8:43:12:F8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:92:94:80:10:e9:a6:c1:ec:53:27:45:42:02:2b:00:2f:bf:
b8:6f:58:77:b2:09:e1:a6:b9:c7:81:44:d6:ba:92:95:d7:d4:
ad:27:a0:70:b9:e7:5d:50:6d:97:9e:9e:11:8f:55:57:c3:ab:
f7:2c:28:8e:93:93:a5:e6:0a:5e:91:83:64:c9:05:b9:86:d7:
26:e6:13:18:d6:cc:83:98:f5:6e:35:42:54:ac:25:27:86:b4:
51:e0:22:4d:da:e6:04:39:a2:38:cd:f2:71:4f:4e:b0:45:95:
65:3f:45:d1:c2:8b:e9:db:7d:53:18:a5:22:80:b0:b3:d4:ea:
e4:24:9e:59:17:31:af:32:bb:c5:2e:ac:bd:8a:1f:7b:58:69:
3b:d1:7d:40:ac:5e:15:54:64:99:ee:c9:7a:54:78:a5:7e:1e:
51:9d:22:ee:10:19:e1:49:17:b0:fb:69:6b:28:60:99:d0:5a:
f1:dc:9b:7c:7a:c6:07:7a:a0:2c:d7:ed:ec:40:d2:e4:90:75:
e1:9b:d5:be:4d:86:f1:f4:bf:b4:3a:37:67:d9:26:3e:4b:d4:
a3:3a:aa:65:99:58:e6:76:ad:ed:7a:e0:68:70:f4:51:fb:d5:
07:f4:fa:2e:9f:55:be:2f:93:90:5b:e9:23:7a:09:69:1e:af:
69:3d:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 10:04:53 2026 by rpki-client